The True Cost of an Elasticsearch Security Incident: 5 Mistakes That Can Turn Into a Breach
Daniel Gleim || 2026-10-13
In this article, we look at five common Elasticsearch security mistakes and the real costs organizations face when security gaps are left unaddressed.
read more
Snapshot Visible, Restore Fails: How an S3 Lifecycle Rule Silently Breaks Your Elasticsearch Backups
Daniel Gleim || 2026-10-06
How an S3 lifecycle rule can silently corrupt Elasticsearch snapshot repositories, causing snapshot_missing_exception restores and how to fix it.
read more
How to Delete Restricted Indices in Elasticsearch Before Major Version Upgrades
Jochen Kressin || 2026-10-01
Learn how to handle restricted system indices when upgrading Elasticsearch from version 8 to 9, including proper role configuration and permission management.
read more
Ten Years of Search Guard: Complete Elasticsearch Data Protection Without Volume-Based Licensing
Anja Glauch || 2026-09-22
Encryption at rest across indices, snapshots and translogs, customer-held keys, and total cost of ownership 50 to 70 percent below Elastic Platinum.
read more
Deduplicating Events in Elasticsearch: The Upsert Strategy
Jochen Kressin || 2026-09-15
Learn how to deduplicate events in Elasticsearch using Logstash upsert operations instead of storage-heavy transforms. Optimize your ingestion pipeline.
read more
Upgrading to Elasticsearch 9: Why Your "Read-Only" 7.x Indices Still Block the Boot
Daniel Gleim || 2026-09-03
Use Kibana’s Upgrade Assistant to reindex or mark 7.x indices read-only, not just index.blocks.write, or 9.x will still refuse to start.
read more
Writing Kibana Plugins , Part 5: Adding a User Interface
Jochen Kressin || 2026-08-31
In this last part of our series, we will add a nice little user interface to manage the data in our accounts sample index.
read more
LDAP Authentication Broken in Elasticsearch 8.18.0: The Entitlements Bug
Jochen Kressin || 2026-08-18
Elasticsearch 8.18.0 and 9.0.0 broke LDAP authentication with a NotEntitledException error. Learn what caused it and how to fix it.
read more
Understanding Translog Recovery When a Failed Node Rejoins Your Elasticsearch Cluster
Jochen Kressin || 2026-08-06
Learn how Elasticsearch handles translog recovery when a failed primary node rejoins the cluster after a replica has been promoted.
read more
How Elasticsearch Checks for Document Existence with Custom IDs
Jochen Kressin || 2026-07-21
Discover how Elasticsearch efficiently checks document existence when using custom IDs through shard routing and logarithmic terms dictionary lookups.
read more